Cycurion, Inc.

We were originally incorporated as KAE Holdings, Inc., under the laws of the State of Delaware in 2017, with the purpose of acquiring and holding operating entities in the cybersecurity industry. On July 14, 2020, we changed our corporate name from KAE Holdings, Inc. to Cyber Secure Solutions, Inc., and, on February 24, 2021, to Cycurion, Inc.

We have two first-tier wholly-owned subsidiaries, Cycurion Sub, Inc. (formerly Cycurion, Inc., until February 14, 2025) and Cycurion Crypto Inc., a Delaware corporation formed in July 2025, and four indirectly wholly-owned second-tier subsidiaries: (i) Axxum Technologies LLC ("Axxum"), a Virginia limited liability company formed in December 2006, (ii) Cloudburst Security LLC ("Cloudburst"), a Virginia limited liability company formed in January 2007, (iii) Secuvant LLC ("Secuvant"), a Utah limited liability company formed in 2014) and (iv) Cycurion Innovation, Inc., a Delaware corporation formed in September 2021 ("Cycurion Innovation"), in connection with our acquisition of assets from Sabres Security Ltd. ("Sabres"), a leading Israeli-based cybersecurity provider.

We deliver high-quality, cybersecurity solutions to federal government civilian, defense, and judiciary agencies in addition to commercial clients across a variety of industries. We, through our operating subsidiaries and strategic partnerships, have numerous prime and subcontracts with key government agencies. Our growth engine is driven by organic business solutions and strategic acquisitions of cyber/ infrastructure service providers.

Our Subsidiaries

Cycurion Sub, Inc.

We own our operating subsidiaries through Cycurion Sub., Inc., a Delaware corporation that, until the closing date of the de-SPAC, was known as "Cycurion, Inc." We continue to conduct our business through the three below-described entities, which are now indirectly wholly-owned second-tier subsidiaries by virtue of the recent closing of the de-SPAC transaction.

Cycurion Crypto Inc.

Our direct wholly-owned subsidiary, Cycurion Crypto, a Delaware corporation, was formed in July 2025 as part of our strategic initiative to position the Company within the expanding digital asset ecosystem and will manage a crypto treasury.

Axxum Technologies LLC

Organized in the Commonwealth of Virginia on December 29, 2006, Axxum is a cybersecurity provider with successful assignments within the multiple sub-agencies of the Department of Homeland Security. We acquired Axxum in November 2017. Following the acquisition, we continued Axxum's core operations of providing contractor services to its existing federal government customer base while leveraging our existing processes and tools to expand its commercial footprint.

Cloudburst Security LLC

Cloudburst is a cybersecurity provider with successful assignments within highly sensitive government agencies and other commercial organizations. We acquired Cloudburst in April 2019. Following the acquisition, we continued Cloudburst’s core operations of providing mission-critical and highly sensitive government agencies and other commercial organizations with high-quality, innovative cybersecurity services. Cloudburst focuses on providing tailored solutions that leverage the industry's best minds and technologies to predict, protect, detect, respond, and sustain our clients from the latest evolving cyber threats.

Cycurion Innovation, Inc.

Cycurion Innovation, Inc. was formed in connection with our acquisition of assets from Sabres, a leading Israeli-based cybersecurity provider. It operates our Cycurion Security Platform’s line of products allows our customers to improve their cyber posture with its MDP SaaS platform. This platform efficiently bundles and easily implements the external protection of a WAF and the internal protection of Bot Mitigation. Bot Mitigation is the reduction of risk to applications, Application Program Interfaces ("APIs"), and backend services from malicious bot traffic that fuels common automated attacks, such as DoS campaigns and vulnerability probing. The costs of single-layer security can be measured in terms of money, time, and risk, as well as the damage wrought by a data breach, which millions of businesses experience each year. Through this interaction of the WAF and Bot Mitigation, the MDP is able to reinforce these layers of security and generate new security layers in real time in response to emerging threats. This process is directed by our Cycurion Security Platform's proprietary, cloud-based AI algorithm. Crucially, the AI underpinning the MDP platform is constantly evolving to counter new threats. Through a crowdsourcing process, the cloud-based MDP learns from every threat to any protected application and uses that newly acquired knowledge to protect all MDP clients better.

Secuvant LLC

Secuvant is an independent IT security firm providing enterprise-grade cybersecurity services, risk management, and managed solutions to mid-market organizations. Founded in 2014, it specializes in managed security services, threat and vulnerability management and compliance using its Cyber7™ framework. We acquired Secuvant LLC on June 3, 2026.

Master Service Agreement with SLG Innovation, Inc.

The SLG team has an average of over 25 years of experience in the development, planning, implementation, and management of information systems. SLG's leadership team offers years of combined success in answering the needs of government agencies and healthcare organizations across the country.

The SLG team has worked nationally, as it has served over 25 Department of Health and Human Services agencies, all 50 state governments, and over 250 local governments. Since SLG's inception, it has primarily focused on customers in the middle of the country. The team of professionals has successfully delivered information technology, project management, and subject matter services to key health and human service projects, including, but not limited to, state Medicaid programs in Illinois, Indiana, Nebraska, and Tennessee, the Indiana Division of Aging, Illinois Early Intervention, the University of Illinois Division of Specialized Care for Children, the Multiple Myeloma Research Foundation, and many more.

We established a subcontractor — prime contractor relationship with SLG in the fall of 2019, where we serviced several government agencies and commercial customers, State of New Mexico, Cognizant, KPMG, and the University of Illinois in support of SLG. Axxum Technologies and SLG Innovation that relationship in 2020. A subcontractor offers its specialized services to a prime contractor. Unlike prime contractors, who focus on the managerial side of the government contract, subcontractors tend to dedicate their efforts to lending subject matter expertise and delivery of service to the project. Technically strong subcontractors, along with a strong subcontractor plan are essential to boost the success of a project.

As a result of the strong technical skills and experience of the cyber teams at Cycurion and its subsidiaries, SLG Innovation entered into a Master Services Agreement ("MSA") with Axxum Technologies to provide services to SLG customers. The MSA is task order driven and the number of task orders is modified periodically depending on actual customer requirements for IT and cybersecurity services. Over the last three years, Axxum Technologies has assisted SLG Innovation in growing its revenue and customer base. As a result, SLG Innovation now represents a majority of Cycurion revenues.

RCR Acquisition Agreement

RCR Technology Corporation ("RCR") performs certain services for SLG in its role as an SLG subcontractor and, in that context, became a creditor of SLG. In connection with the transactions contemplated by the term sheet with SLG (the "SLG Term Sheet"), on April 25, 2023, Cycurion Sub and RCR also entered into a term sheet (the "RCR Term Sheet") for a distinct, but related transaction. The RCR Term Sheet contemplates a transaction, pursuant to which RCR will sell to Cycurion all of the accounts receivable of SLG in favor of RCR (but for those accounts that are less than 90 days old as of the date of consummation of the contemplated transaction). The consummation of the transactions contemplated by the RCR Term Sheet is contingent upon the consummation of the transactions contemplated by the SLG Term Sheet. We consummated the transactions contemplated by the RCR Term Sheet on September 25, 2025. Cycurion issued 248,006 shares of common stock to RCR as a result of the consummation of the transaction contemplated by the RCR Term Sheet pursuant to the Securities Purchase Agreement, dated September 25, 2025.

Acquisition of Technology

On September 30, 2021, we acquired certain technology assets of Sabres, a leading Israeli-based cybersecurity provider. As part of the asset purchase agreement, we acquired Multi-Dimensional Protection ("MDP"), WAF and Bot Mitigation SaaS platforms and their associated intellectual property.

Our Cycurion Security Platform's (formerly Sabres') line of products allows our customers to improve their cyber posture with its MDP SaaS platform. This platform efficiently bundles and easily implements the external protection of a WAF and the internal protection of Bot Mitigation. Bot Mitigation is the reduction of risk to applications, APIs, and backend services from malicious bot traffic that fuels common automated attacks, such as DoS campaigns and vulnerability probing. The costs of single-layer security can be measured in terms of money, time, and risk, as well as the damage wrought by a data breach, which millions of businesses experience each year. Through this interaction of the WAF and Bot Mitigation, the MDP is able to reinforce these layers of security and generate new security layers in real time in response to emerging threats. This process is directed by our Cycurion Security Platform's (formerly Sabres') proprietary, cloud-based AI algorithm. We do not have AI processing in the production version of the software. That version is in the testing and evaluation phase. Crucially, the AI underpinning the MDP platform is constantly evolving to counter new threats. Through a crowdsourcing process, the cloud-based MDP learns from every threat to any protected application and uses that newly acquired knowledge to protect all MDP clients better.

Our Cycurion Security Platform's (formerly Sabres') line of products provides solutions for substantially all web application security needs. These products provide solutions, whether a client is in need of a web application firewall to comply with regulations and ensure it has a first line of defense against the hazards that the internet can present or is in need of enterprise-level products that empower SOC teams and security management. Our Cycurion Security Platform's constantly survey a client's data to detect security issues in need of attention, send automatic updates, and provide the client with a complete database of rules and threats.

We have integrated the technology assets that we acquired from Sabres (which now constitutes our Cycurion Security Platform) into our Managed Security Services Practice. We believe that the platform will enhance our service offerings and assist with the expansion of our commercial business. Our dedicated support team will manage the Sabres platform, provide real time reporting, response to security incidents, and will manage all data privacy needs from a single security information and event management SaaS platform dashboard.